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CLAIMS : 



1. An apparatus for computing the sum of a divisor Di=g.c.d. 
( (ai(x) ) , (y-bi(x) ) ) and a divisor D2=g.c.d. ( (a2 (x) ) , (y-b2 (x) ) ) 
on Jacobian of a hyperelliptic curve y2+y=f{x) defined over 
GF(2''), said apparatus comprising: 

a storage for storing ai(x), aaCx), bi(x) and b2(x); and 
means for calculating q (x) ={ Si (x) (bi (x) +b2 (x) ) } mod a2(x) 
or q(x) = { S2 (x) (bi (x) +b2 (x) ) } mod ai(x) by using Si(x) or S2(x) 
in Si (x) ai (x) +S2 (x) a2 (x) =1 in case of GCD (ai (x) , aa (x) ) =1 where 
GCD denotes a greatest common divisor of two polynomials. 

2. An apparatus for calculating a' (x) and b'(x) of a reduced 
divisor D'==g.c.d. ( (a ' (x) ) , (y-b ' (x) ) ) which is a linearly 
equivalent to D1+D2 for a divisor Di=g.c.d. ( (ai (x) ) , (y^bi (x) ) ) 
and a divisor D2=g.c.d, { (a2 (x) ) , (y-b2 (x) ) ) on Jacobian of a 
hyperelliptic curve y^-fy=f(x) defined over GF(2"), said 
apparatus comprising : 

means for calculating q (x) =Si (x) (bi (x) +b2 (x) ) mod a2{x) 
by using Si(x) in Si (x) ai (x) +S2 (x) aa (x) =1 in case of 
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GCD (ai (x) , 32 (x) ) =1 where GCD denotes a greatest common divisor 
of two polynomials; 

means for calculating 

a(x)=Q{qMx)ai(x) ,a2(x) ) +Q{f (x) ,ai(x)a2(x) ) which is rendered a 
monic polynomial where Q(A, B) is a quotient of A/B; 

means for calculating p (x) = (q (x) ai (x) +bi (x) 4^1 ) mod a(x); 
means for calculating a ' (x) =Q ( f (x) +p2 (x) , a (x) ) ; and 
means for calculating b ' (x) = (P (x) +1 ) mod a' (x) . 

3. An apparatus for computing the sum of a divisor Di=g.c*d. 
( (ai (x) ) , (y-bi (x) ) ) on Jacobian of a hyperellipt ic curve 
y^-fy=f(x) defined over GF{2"), said apparatus comprising: 

a storage for storing ai(x), and bi{x); and 
means for calculating q (x) =Q (bi^ (x) +f (x) mod ai^ (x) , ai (x) ) 
where Q(A, B) is a quotient of A/B, 

4. An apparatus for calculating a' (x) and b'(x) of a reduced 
divisor D'=g.c.d. ( (a * (x) ) , (y-b ' (x) ) ) which is a linearly 
equivalent to Di+Di for a divisor Dl=g.c.d- 
( (ai (x) ) , (y-bi (x) ) ) on Jacobian of a hyperellipt ic curve 
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y2+y=f(x) defined over GF(2"), said apparatus comprising: 

means for calculating q(x)=Q(biMx)+f (x) mod aiMx),ai(x)) 
where Q(A, B) is a quotient of A/B; 

means for calculating a(x)=q2 (x) +Q (f (x) , ai^ (x) ) which is 
rendered a monic polynomial; 

means for calculating p (x) = (biMx) +f (x) mod ai^{x)+l) mod 

a ( x ) ; 

means for calculating a M x) =Q ( f (x) + (x) , a (x) ) ; and 

means for calculating b' (x) == (p (x) 4-1 ) mod a'(x). 

5. A method for calculating a'(x) and b' (x) of a reduced 
divisor D'=g.c.d. ( (a ' (x) ) , (y-b ' (x) ) ) which is a linearly 
equivalent to D1+D2 for a divisor Di=g,c.d. ( (ai (x) ) , (y-bi (x) ) ) 
and a divisor D2=g.c.d. ( (aa (x) ) , (y-ba (x) ) ) on Jacobian of a 
hyperelliptic curve y^+y=f{x) defined over GF(2''), said method 
comprising the steps of: 

calculating and storing in a storage 

q (x) = { si (x) (bi (x) +b2 (x) ) } mod a2(x) by using Si(x) in 
Si (x) ai (x) +S2 (x) a2 (x).=l in case of GCD (ai (x) , aa (x) ) =1 where GCD 
denotes a greatest common divisor of two polynomials; 
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calculating and storing in a storage 

a(x)=Q(q^(x)ai(x) ,a2(x) )+Q(f (x) ^ai(x)a2(x) ) which is rendered a 
monic polynomial where Q(A, B) is a quotient of A/B; 

calculating and storing in a storage □□ 
p(x) = (q(x)ai(x)+bi(x)4^1) mod a(x); 

calculating and storing in a storage 

a' {x)-Q(f (x)+(32(x) ,a(x) ) ; and 

calculating and storing in a storage b Mx) = ( p (x) +1 ) mod 
a' (X) . 

6. A method for calculating a'(x) and b' (x) of a reduced 
divisor D'=g.c.d, ( (a ' (x) ) , (y-b ' (x) ) ) which is a linearly 
equivalent to Di+Di for a divisor Dl=g.c.d, 
( (ai (x) ) , (y-bi (x) ) ) on Jacobian of a hyperelliptic curve 
y^+y=f (x) defined over GF {2^) , said method comprising the 
steps of: 

calculating and storing in a storage q (x) =Q (bi^ (x) +f (x) 
mod ai^{x)^ai) where Q(A,B) is a quotient of A/B; 

calculating and storing in a storage a (x) =q^ (x) +Q ( f (x) , 
ai^(x)) which is rendered a monic polynomial; 
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calculating and storing in a storage p (x) = (bi^ (x) +f (x) 
mod ai^(x) + l) mod a(x); 

calculating and storing in a storage a ' (x) -=Q ( f (x) H-p^ (x ) , 
a(x) ) ; and 

calculating and storing in a storage bMx) = (p (x) +1) mod 
a' (X) . 

7. A method for computing the sum of a divisor Dl=g.c.d. 
( (ai(x) ) , (y"bi(x) ) ) and a divisor D2=g.c.d. ( (aa (x) ) , (y-bs (x) ) ) 
on Jacobian of a hyperelliptic curve y2+y==f{x) defined over 
GF(2''), said method comprising the steps of: 

storing ai{x), a2(x), bi(x) and b2(x); and 

calculating and storing in a storage 

q(x)=si(x) (bi(x)+b2(x) ) mod a2(x) or q(x) = {S2{x) (bi (x) -t-ba (x) ) } 
mod ai(x) by using Si(x) or S2(x) in Si (x) ai (x) +S2 (x) a2 (x) =1 in 
case of GCD (ai (x) , 32 (x) ) =1 . 

8. A method for computing the sum of a divisor Di=g.c.d. 
( (ai (x) ) , (y-bi (x) ) ) on Jacobian of a hyperelliptic curve 
y^+y=f(x) defined over GF(2"), said method comprising the 
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steps of: 

storing ai(x), and bi(x); and 

calculating and storing in a storage q (x) =Q (bi^ (x) +f ( 
mod ai^(x), ai(x)) where Q{A,B) is a quotient of A/B. 
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